Privacy policy

PRIVACY POLICY and COOKIE FILES

In fulfilling the information obligation resulting from art. 12. and 13. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), the Personal Data Administrator hereby informs:

1. This Privacy Policy (hereinafter referred to as the “Policy” ) is addressed to Users and Orderers using the website available in the domain https://occhianera.pl (hereinafter referred to as the “Online Store” ) and specifies the type, scope, purposes of data processing. The Policy is informative and constitutes an integral part of the Regulations of the Online Store. All terms used in the Policy written in capital letters have the same meaning as assigned to them in the regulations of the Online Store, unless otherwise stated in this Policy.
2. The controller of personal data obtained from the Online Store is the Seller, i.e. Mr. Piotr Kuberski, running a sole proprietorship under the name of iQub Piotr Kuberski at the address: 95-010 Warszewice 54C, Stryków commune, Zgierz district, Łódź province, NIP: 7282208300, REGON 389159302, hereinafter also referred to as the “Controller” .
3. By placing an Order in the Online Store without registering an Account, and/or registering an Account, and/or contacting the Seller (by e-mail or telephone, or via a form), and/or using other services provided by the Seller electronically (Password reminder, newsletter, Product search) – the User provides the Seller with his/her personal data (name and surname, address, e-mail address, telephone number, possibly company name, business address, Tax Identification Number, IP address of the computer used by the User when browsing the Online Store, adding Products to favorites, comparing Products).
4. The purposes and activities of personal data processing:
   4.1. placing an Order without registering an Account – providing data is voluntary, but necessary for the execution of the Sales Agreement and delivery of the Order to the address indicated by the Ordering Party. The data provided when placing an Order are used only for the purpose of executing the Sales Agreement concluded with the User, and the legal basis for their processing is art. 6 sec. 1 letter b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR Regulation” ). The data will be processed by the Administrator for the period necessary to execute the Sales Agreement, however, the Administrator will continue to store the User’s data in order to defend against any claims related to any withdrawal from the Sales Agreement, consider complaints, for tax settlement purposes, but no longer than 5 years from the date of obtaining the data, which constitutes the legitimate interest of the Administrator, referred to in art. 6 sec. 1. letter f) of the GDPR Regulation;
   4.2. Account registration – in order not to provide personal data for subsequent purchases, the User may register an Account. Providing data is voluntary, but necessary to register an Account. The data provided during registration (name and surname, e-mail address) are used to manage the Account and execute the Sales Agreements concluded by the Ordering Party by the Administrator as the seller, and the legal basis for their processing is the consent granted by the User during Account registration (in accordance with art. 6 sec. 1 letter a) of the GDPR Regulation). The data will be processed by the Administrator for the duration of the Account, unless the User resigns from having an Account earlier. However, resigning from the Account does not lead to the deletion of the data from the database. The Administrator will continue to store the User’s data in order to defend against possible claims related to maintaining the Account, in particular for the purposes of demonstrating the User’s consent to registering an Account, but no longer than 5 years from the date of obtaining the data, which constitutes the legitimate interest of the Administrator, referred to in art. 6 sec. 1. letter f) of the GDPR Regulation;
   4.3. contact between the User of the Online Store and the Administrator – by contacting via e-mail or by telephone using the contact details indicated in the Contact tab in the Online Store, the User provides the Administrator with their e-mail address as the sender’s address of the message, as well as their name and surname and contact telephone number. Providing the data is voluntary, but necessary for the Administrator to be able to establish contact with the User of the Online Store. In this case, the User’s data are processed for the purpose of contact on the basis of actions requested and initiated by the User, and the legal basis for processing is art. 6 sec. 1 letter b) of the GDPR Regulation. The legal basis for processing data after the end of contact is the justified purpose of archiving correspondence for the purposes of demonstrating its course in the future (art. 6 sec. 1 letter f) of the GDPR Regulation). The content of correspondence may be subject to archiving, but not longer than 5 years from the date of data acquisition. The User of the Online Store has the right to demand a presentation of the history of correspondence conducted with the Administrator (if it was subject to archiving), as well as to demand its deletion, unless archiving is justified due to the overriding interest of the Administrator, e.g. defense against potential claims from the User of the Online Store;
   4.4. using the Account Password reminder service – providing data is voluntary, but necessary for the performance of the contract for the provision of electronic services by the Administrator. The data provided by the User are used to remind the User of the Account Password by e-mail, and the legal basis for their processing is the performance of the contract concluded with the User, in accordance with art. 6 sec. 1 letter f) of the GDPR Regulation. b) GDPR Regulation. The data will be processed by the Administrator for the period necessary to perform the contract for the provision of services by electronic means, but no longer than 5 years from the date of obtaining the data. After the contract has been performed, the Administrator will continue to store the User’s data in order to defend against any claims regarding the services provided by the Administrator by electronic means, to consider complaints, which constitutes the legitimate interest of the Administrator, referred to in art. 6 sec. 1. letter f) of the GDPR Regulation;
   4.5. newsletter – the User of the Online Store who wants to subscribe to the newsletter in order to receive commercial, advertising and marketing information about the Products from the Administrator by e-mail must provide their e-mail address via the newsletter subscription form or when placing an Order, check the appropriate checkbox with consent. Providing data is voluntary, but necessary to subscribe to the newsletter. The data provided when subscribing to the newsletter are used to send the User the newsletter, and the legal basis for their processing is the consent given by the User when subscribing to the newsletter (in accordance with art. 6 sec. 1 letter a) of the GDPR Regulation. The data will be processed by the Administrator for the period of the newsletter’s operation, unless the User resigns from receiving it earlier. However, resigning from receiving the newsletter does not lead to the complete deletion of the data from the database. The Administrator will continue to store the User’s data in the mailing system in order to defend against any claims related to sending the newsletter, in particular for the purpose of demonstrating the User’s consent to receive the newsletter, which constitutes the legitimate interest of the Administrator of personal data, referred to in art. 6 sec. 1 letter f) of the GDPR Regulation. The period of data storage after resigning from the newsletter is no longer than 5 years from the resigning from the subscription. The User may at any time correct their data saved in the newsletter database. The User also has the right to transfer data, referred to in art. 20 of the GDPR Regulation;
   4.6. searching for a Product in the Online Store – the User’s data collected in the system logs of the Online Store are used by the Administrator only for the purpose of displaying relevant information to the User, in accordance with their request, which constitutes the legitimate interest of the Personal Data Administrator, referred to in art. 6 sec. 1. letter f) of the GDPR Regulation;
   4.7. analysis and statistics of the Online Store data – the User’s personal data collected in the system logs of the Online Store, e.g. when adding Products to favorites or comparing Products are used by the Administrator to conduct analyses of the activity of the Online Store Users in order to improve the functionality of the Online Store and the technical and administrative support of the Online Store, which constitutes the legitimate interest of the Administrator, and the legal basis for their processing is art. 6 sec. 1. letter f) of the GDPR Regulation.
5. The Administrator informs that the User of the Online Store has, at any time, the right to transfer data, referred to in art. 20 of the GDPR Regulation, the right to access the content of personal data and the possibility of correcting, rectifying, objecting to the processing of data, and the consent granted to the processing of data may be withdrawn by the User at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal. The Administrator may refuse to delete the user’s personal data if there are grounds resulting from the provisions of law. The User also has the right to lodge a complaint regarding the processing of personal data to the President of the Office for Personal Data Protection. User data will not be subject to automated decision-making, including profiling. Personal data is not transferred outside the European Economic Area.
6. The principles related to the implementation of the indicated User rights are described in detail in Articles 15 – 21 of the GDPR Regulation.
7. The Administrator hereby also informs that he never transfers, sells or lends the collected personal data of Users to third parties other than those indicated in this Policy and the regulations of the Online Store (e.g. banks handling payments, a company handling electronic payments in the przelewy24 system, suppliers of Orders, an accounting firm, a company providing technical support for the server on which the Online Store is located), unless with the express consent or at the request of the User, or at the request of state authorities authorized under the law in connection with ongoing proceedings (e.g. courts, law enforcement agencies, Trade Inspection).
8. The Administrator processes personal data provided by the User in a manner consistent with the scope of the authorization granted by the User and the requirements of the law, including the provisions of the GDPR Regulation, in particular it protects the personal data of Users against making them available to unauthorized persons, loss or damage, also guaranteeing the confidentiality of all personal data provided to it – the Online Store has enabled connection encryption using an SSL certificate.
9. The Online Store website may also contain links to other websites not administered by the Administrator (e.g. Facebook, Instagram), the User may also be redirected to the Online Store from other websites, e.g. via a tracking pixel from the Facebook social networking site, therefore the Administrator cannot be held responsible for the content of these websites or the level of privacy protection implemented by the administrators of these websites. The Administrator also informs that this Policy applies only to the Online Store and that after switching to other websites, it is recommended that the User familiarizes themselves with the privacy policy of the relevant website before sharing their personal data there. By deciding to switch to such websites and visiting them, the User does so at their own risk.
10. The online store uses “cookies” files, which are used to identify the browser when using the online store, so that it is known which page to display. Cookies do not contain any personal data. When entering the online store, certain information may be placed on the User’s computer, which may take the form of a “cookie” file. Detailed and most up-to-date information on this subject can be found directly on the manufacturer’s website http://www.google.pl/intl/pl/policies/technologies/types/
11. “Cookies” are small files consisting of a series of letters and characters, saved on the User’s computer when visiting a given Product Page presented in the Online Store. “Cookies” files are used in the Online Store only to better adapt the website to the individual preferences of the User. In addition, “cookies” files may be used for the following purposes:
    a) to ensure the proper operation and improvement of the functionality of the Online Store – “cookies” files enable remembering information that has been provided by the User, e.g. remembering the contents of the basket, remembering the Login;
    b) improving the efficiency and optimization of the Online Store – “cookies” files enable reading information on how Users navigate the Online Store, and thus help to improve its operation;
    c) targeting informational and promotional content – “cookies” files are intended to automatically adapt the content of the Online Store to the needs of the User;
    d) to prevent sending spam .
12. The information collected and generated by “cookies” in the Online Store does not allow for personalization or identification of the User, and as a result of their use, no personal data of the User is stored.
13. The “cookies” files used in the Online Store are safe and do not have a harmful effect on the User’s computer. The User may at any time change the way in which the browser uses “cookies”, including withdrawing consent to their use, blocking or removing those that come from the Online Store. In most Internet browsers, you can remove, delete “cookies” files from your computer’s hard drive, block all sent “cookies” files or set a warning before saving such files on your disk. To do this, please read the user manual or help topics of the Internet browser used. The process of checking and removing “cookies” may vary depending on the browser used.
14. Failure to express the User’s consent to the use of “cookies” in the minimal version will result in incorrect display of the content of the subpages of the Online Store. Failure to consent to the use of other “cookies” may limit some functionalities available in the Online Store. The User may allow only the use of selected “cookies”.
15. The Administrator uses statistical analysis of website traffic through, among others, Google Analytics (Google Inc. based in the USA), including the Google Analytics 4 tool – detailed information about this tool is available at the following link: https://support.google.com/analytics/answer/10089681?hl=pl&ref_topic=9143232 . The online store also uses the DSA (Dynamic Search Ads) tool from Google. No personal data of the User is transferred to the operator of these services, only anonymized information. The services are based on the use of cookies on the User’s end device. In terms of information about User preferences collected by the Google advertising network, the User can view and edit information resulting from “cookies” files using the tool: https://www.google.com/ads/preferences/ Information on the methods of using data from the Online Store by Google is available at the link https://policies.google.com/technologies/partner-sites and at the link https://policies.google.com/technologies/cookies and https://support.google.com/google-ads/answer/2471185?hl=pl
16. The Administrator is authorized to introduce changes to this Policy for important reasons (e.g. changes in legal regulations, changes in the rules for placing Orders in the Online Store). In the event of changes, the User will be notified at least 14 days in advance before the date of entry into force of the changes – appropriate information about changes to the Policy will be placed in the Online Store, and Users with an Account or subscribing to the newsletter will also be notified by e-mail. In the event of non-acceptance of the changed Policy, the User has the right to terminate the Policy, and thus refuse to continue leaving their personal data.
17. In case of any questions, comments, requests or suggestions regarding this Policy, the User of the Online Store is requested to contact the Administrator. The User is also requested to immediately notify the Administrator of any breaches of security rules found by him/her related to the use of the Online Store by e-mail to the following address: or by phone: +48 531 276 848, daily on Working Days from Monday to Friday from 8:00 a.m. to 5:00 p.m., on Saturdays from 9:00 a.m. to 3:00 p.m. (call fee according to the operator’s tariff, whose services the User of the Online Store uses).

Warszewice, July 24, 2024